Hi there,
Before I start, I want to let you know that I am a complete novice at trying to fix a PC,but having trawled the net for help on the above virus, I found that your descriptive help was by far the best and easiest to understand.
Thanks for being there and doing what you do. I dont know what it is about your words but it makes me want to trust them which isn't very easy to do in this fraudulent world.

I wasnt really sure what I was doing, but did as you described step by little step. It seems to have done the trick and has got rid of the pop ups and the "best security" home page.
(I still havnt got a clue what a Hijack file is so I wont be able to send it)
However there is still a partial desktop icon left which came in with the rest of the virus. Its not a picture, just a very tiny image of a window with a toolbar(it was a green shield before I ran smitfraud fix).

My question to you Jane, if you wouldnt mind helping please, is....1, can I just dump that in the recycle bin and forget it or does it need dealing with. and....

2. I ran Panda check as you described straight after running Ewido and smitfraud fix and it told me that I have some more stuff on there that is a problem. Now... I down loaded several of these "scan your computer for free" programmes before I found you and they all say there are problems, but they are all different problems, and if you want them fixed you then have to pay. Why do you think Panda is any different, 'cos really its just a lesser degree of a con as the Myzor virus. It just looks to me as if they are planting these problems when you download the scan, to make you buy their cleansing software.

This probably sounds silly to you coming from a novice as there is probably a sensible reason for it, but as I now trust your wisdom I may actually buy somthing to protect myself instead of using free stuff.
I already have Mcafee anti virus which didnt get it and Spybot which did the same.What shall I do for the best .??
Many thanks
Moffy

Hi Moffy,

We only want to see the log generated by the Panda scan. If a system file is infected with a virus or trojan it WILL clean those. If some spyware items are found also, it will not disinfect spyware files, we only need to see what it found. If anything needs cleaning we have free tools or methods to do that. Did you save the log from Panda? If so, can you open the log text file and copy and paste the results back here?

Also the log from SmitfraudFix...is called rapport.txt and located on your hard drive (normally c:\)

HijackThis is a tool we use to diagnose your system for undetected or hidden malware. Instructions on how to make a HijackThis log is here:
Instructions on creating a HijackThis Log
http://www.lavasoftsupport.com/index.php?showtopic=216

And Adware SE has had detection for this variant in the latest updates. Did you scan with Adaware SE as well?

Please can you make sure that you are using
Ad-aware SE Build 106r1
Note: If your version is 6.0 and not the SE, you need to uninstall and get the latest version from the above link.

[if not Uninstall your old Ad-aware first then install SE]
Then use the WebUpDate
to get the latest Definition file
SE1R112 15.06.2006
To do this Open Ad-aware
Click the WebUpDate
button at the top right hand side of the Ad-aware screen (The world globe).
Click "Connect"
Ad-aware will then download the latest Definition file for you.
To make sure it is updated , look at the main
Ad-aware screen, and look under "Initialization Status"
It should say the Latest Definition file.
then scan doing a "Full Scan"
and then post your logfile here by using the Add-Reply Feature .
As Logs are stored in :
C:\Documents and Settings\USERNAME\Application Data\Lavasoft\Ad-aware\Logs\.
An easy way to get there is to
click Start,
click Run
And type in and press ENTER: %appdata%
then click Lavasoft
then Ad-Aware
and then Logs.
scroll down to find the latest one that you have
(by date & time)
and open it right Click select all
copy and then paste the contents of it here.
(Make sure that all of your Logfile has been posted, sometimes it will require two post's to get it all)
I recommend that you use the WebUpDate just before you scan that way you will always be up to date.

(note The Application Data is a hidden folder, so you will need to show hidden files and folders)